IBM Lotus Domino Server 'diiop' Multiple Remote Code Execution Vulnerabilities
BID:46233
Info
IBM Lotus Domino Server 'diiop' Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 46233 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-0913 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2011 12:00AM |
| Updated: | Jun 16 2011 04:00PM |
| Credit: | Intevydis |
| Vulnerable: |
IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5.1 Fix Pack 2 IBM Lotus Domino 8.5.1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 Fix Pack 5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.0.1 IBM Lotus Domino 7.0.4 IBM Lotus Domino 7.0.3 Fix Pack 1 (FP1) IBM Lotus Domino 7.0.3 IBM Lotus Domino 7.0.2 FP3 IBM Lotus Domino 7.0.2 FP2 IBM Lotus Domino 7.0.2 FP1 IBM Lotus Domino 7.0.2 IBM Lotus Domino 7.0.1 IBM Lotus Domino 7.0 IBM Lotus Domino 6.5.6 IBM Lotus Domino 6.5.5 FP3 IBM Lotus Domino 6.5.5 FP2 IBM Lotus Domino 6.5.5 FP1 IBM Lotus Domino 6.5.5 IBM Lotus Domino 6.5.4 FP 2 IBM Lotus Domino 6.5.4 FP 1 IBM Lotus Domino 6.5.4 IBM Lotus Domino 6.5.3 IBM Lotus Domino 6.5.2 IBM Lotus Domino 6.5.1 IBM Lotus Domino 6.5 .0 IBM Lotus Domino 6.0.5 IBM Lotus Domino 6.0.4 IBM Lotus Domino 6.0.3 IBM Lotus Domino 6.0.2 CF2 IBM Lotus Domino 6.0.2 IBM Lotus Domino 6.0.1 IBM Lotus Domino 6.0 IBM Lotus Domino 5.0.13 IBM Lotus Domino 8.5.1.1 IBM Lotus Domino 8.5.0.1 IBM Lotus Domino 8.5 FP1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2.4 IBM Lotus Domino 8.0.2.3 IBM Lotus Domino 8.0.2.2 IBM Lotus Domino 8.0.2.1 IBM Lotus Domino 8.0 |
| Not Vulnerable: |
IBM Lotus Domino 8.5.3 |
Discussion
IBM Lotus Domino Server 'diiop' Multiple Remote Code Execution Vulnerabilities
The IBM Lotus Domino server is prone to multiple remote code-execution vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the Lotus Domino server process. Failed attacks will cause denial-of-service conditions.
The IBM Lotus Domino server is prone to multiple remote code-execution vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the Lotus Domino server process. Failed attacks will cause denial-of-service conditions.
Exploit / POC
IBM Lotus Domino Server 'diiop' Multiple Remote Code Execution Vulnerabilities
An exploit is available as part of VulnDisco 8.7 from Intevydis. Please see the references for more information.
An exploit is available as part of VulnDisco 8.7 from Intevydis. Please see the references for more information.
Solution / Fix
IBM Lotus Domino Server 'diiop' Multiple Remote Code Execution Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
IBM Lotus Domino Server 'diiop' Multiple Remote Code Execution Vulnerabilities
References:
References:
- IBM Lotus Domino Homepage (IBM)
- Lotus Domino Server 8.5 fp1 getEnvironmentString stack overflow. The exploit has (Intevydis)
- (Feb 2011) Potential security vulnerabilities in Lotus Notes & Domino (ibm)
- ZDI-11-052 Lotus Domino Server diiop Client Request Operation Remote Code Execut (Zero Day Initiative)
- ZDI-11-053 Lotus Domino Server diiop getEnvironmentString Remote Code Execution (Zero Day Initiative)